last executing test programs:

2.118085489s ago: executing program 1 (id=132):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.117876558s ago: executing program 1 (id=133):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4082, 0xff2}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0)

1.198998589s ago: executing program 1 (id=138):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

980.757477ms ago: executing program 1 (id=140):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

882.815255ms ago: executing program 1 (id=143):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

865.81488ms ago: executing program 0 (id=144):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}}, 0x0)

817.090025ms ago: executing program 1 (id=145):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000340)=0x10)
r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendto$llc(r3, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659", 0x25, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="04d093", 0x3}], 0x1}, 0x3)
r11 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12)

671.170174ms ago: executing program 0 (id=147):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x8104}], 0x2, 0x0, 0x0, 0x0)

598.466302ms ago: executing program 0 (id=148):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000)

597.917564ms ago: executing program 2 (id=149):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

521.014814ms ago: executing program 0 (id=150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0)

399.26221ms ago: executing program 0 (id=151):
unshare(0x8040480)
unshare(0x2a020480)

398.583414ms ago: executing program 2 (id=152):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

305.792788ms ago: executing program 0 (id=153):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

207.854529ms ago: executing program 2 (id=154):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
unshare(0x22020400)
unshare(0x2c060000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)

155.837917ms ago: executing program 2 (id=155):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0x0)

56.980803ms ago: executing program 2 (id=156):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

0s ago: executing program 2 (id=157):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x6)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r3, 0x0, 0x417}, 0x18)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="15", 0x1}], 0x1}, 0x4000080)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e25, 0x0, 0x3, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x0, 0xfffffffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@remote, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002daad000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62868' (ED25519) to the list of known hosts.
syzkaller login: [   56.159581][ T5832] cgroup: Unknown subsys name 'net'
[   56.269849][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.273927][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.587775][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.691131][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.695715][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.717584][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.724081][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.737724][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.740806][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.743980][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.750317][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.750350][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.757921][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.761993][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.765039][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.790661][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.804750][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.810071][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.099456][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   62.209650][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   62.278084][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   62.282934][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.287108][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.289880][ T5849] bridge_slave_0: entered allmulticast mode
[   62.293566][ T5849] bridge_slave_0: entered promiscuous mode
[   62.324769][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.327967][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.330645][ T5849] bridge_slave_1: entered allmulticast mode
[   62.333778][ T5849] bridge_slave_1: entered promiscuous mode
[   62.408209][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.443222][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.452605][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.455642][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.459449][ T5853] bridge_slave_0: entered allmulticast mode
[   62.463091][ T5853] bridge_slave_0: entered promiscuous mode
[   62.505048][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.508148][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.510843][ T5853] bridge_slave_1: entered allmulticast mode
[   62.514477][ T5853] bridge_slave_1: entered promiscuous mode
[   62.528599][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.531558][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.534273][ T5846] bridge_slave_0: entered allmulticast mode
[   62.538512][ T5846] bridge_slave_0: entered promiscuous mode
[   62.563544][ T5849] team0: Port device team_slave_0 added
[   62.566349][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.570759][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.573497][ T5846] bridge_slave_1: entered allmulticast mode
[   62.576884][ T5846] bridge_slave_1: entered promiscuous mode
[   62.595404][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.600579][ T5849] team0: Port device team_slave_1 added
[   62.604884][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.610877][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.615560][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.674298][ T5853] team0: Port device team_slave_0 added
[   62.678587][ T5846] team0: Port device team_slave_0 added
[   62.682718][ T5853] team0: Port device team_slave_1 added
[   62.685392][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.687864][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.697627][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.703410][ T5846] team0: Port device team_slave_1 added
[   62.706283][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.708919][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.720294][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.765678][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.768364][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.776599][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.781615][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.784284][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.794801][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.800384][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.802634][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.811732][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.817361][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.820239][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.832190][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.912512][ T5849] hsr_slave_0: entered promiscuous mode
[   62.915985][ T5849] hsr_slave_1: entered promiscuous mode
[   62.937150][ T5853] hsr_slave_0: entered promiscuous mode
[   62.940453][ T5853] hsr_slave_1: entered promiscuous mode
[   62.943300][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   62.945667][ T5853] Cannot create hsr debugfs directory
[   62.969035][ T5846] hsr_slave_0: entered promiscuous mode
[   62.971725][ T5846] hsr_slave_1: entered promiscuous mode
[   62.973815][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   62.975640][ T5846] Cannot create hsr debugfs directory
[   63.265861][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.278932][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.286397][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.301086][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.348192][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.361792][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.371174][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.378300][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.483138][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.492061][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.505736][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.512479][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.563434][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.593388][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.601042][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   63.615296][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.618835][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.638799][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.641710][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.652502][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   63.672034][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.674286][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.688881][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.691762][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.715846][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.720473][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.728463][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.773214][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   63.794860][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.797208][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.808904][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.811171][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.827980][ T5848] Bluetooth: hci1: command tx timeout
[   63.829890][ T5848] Bluetooth: hci2: command tx timeout
[   63.832118][ T5848] Bluetooth: hci0: command tx timeout
[   63.924508][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.956158][ T5853] veth0_vlan: entered promiscuous mode
[   63.962553][ T5853] veth1_vlan: entered promiscuous mode
[   63.980451][ T5853] veth0_macvtap: entered promiscuous mode
[   63.984417][ T5853] veth1_macvtap: entered promiscuous mode
[   63.995769][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.005707][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.015845][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.031879][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.036118][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.040867][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.055022][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.062950][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.146010][ T5846] veth0_vlan: entered promiscuous mode
[   64.149753][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.152558][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.176301][ T5849] veth0_vlan: entered promiscuous mode
[   64.192276][ T5846] veth1_vlan: entered promiscuous mode
[   64.202571][ T5849] veth1_vlan: entered promiscuous mode
[   64.210339][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.213061][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.251666][ T5849] veth0_macvtap: entered promiscuous mode
[   64.258666][ T5846] veth0_macvtap: entered promiscuous mode
[   64.261735][ T5849] veth1_macvtap: entered promiscuous mode
[   64.269872][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.278099][ T5846] veth1_macvtap: entered promiscuous mode
[   64.307392][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.312121][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.323187][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.343204][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.352549][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.369730][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.373342][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.397396][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.401570][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.418810][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.422513][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.448307][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.537775][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.540755][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.599942][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.603193][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.628538][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.635181][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.641514][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.653540][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.804177][ T5935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.812027][ T5937] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   64.909862][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   64.955584][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   64.994110][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'.
[   65.126247][ T5958] delete_channel: no stack
[   65.138855][ T5960] tipc: Started in network mode
[   65.143176][ T5960] tipc: Node identity 8245e5ea967a, cluster identity 4711
[   65.146337][ T5960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.159594][ T5960] syzkaller0: entered promiscuous mode
[   65.162275][ T5960] syzkaller0: entered allmulticast mode
[   65.187623][ T5960] tipc: Resetting bearer <eth:syzkaller0>
[   65.205669][ T5959] tipc: Resetting bearer <eth:syzkaller0>
[   65.224133][ T5964] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   65.224354][ T5959] tipc: Disabling bearer <eth:syzkaller0>
[   65.269578][ T5966] trusted_key: syz.0.24 sent an empty control message without MSG_MORE.
[   65.403526][ T5972] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.26'.
[   65.443700][ T5975] netlink: 830 bytes leftover after parsing attributes in process `syz.2.27'.
[   65.746373][ T5988] netlink: 'syz.1.34': attribute type 1 has an invalid length.
[   65.852283][ T5993] gretap1: entered promiscuous mode
[   65.907959][   T54] Bluetooth: hci0: command tx timeout
[   65.910366][   T54] Bluetooth: hci2: command tx timeout
[   65.912614][   T54] Bluetooth: hci1: command tx timeout
[   65.941884][ T5988] macvlan2: entered promiscuous mode
[   65.944275][ T5988] macvlan2: entered allmulticast mode
[   66.352534][ T6003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.638334][ T6008] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   66.648729][ T6010] netlink: 276 bytes leftover after parsing attributes in process `syz.0.40'.
[   66.689478][   T33] audit: type=1800 audit(1756894365.710:2): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.36" name="memory.events" dev="tmpfs" ino=98 res=0 errno=0
[   66.755653][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.785080][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'.
[   66.830583][ T6018] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.44'.
[   66.834536][ T6018] netlink: zone id is out of range
[   66.842668][ T6018] netlink: zone id is out of range
[   66.844835][ T6018] netlink: zone id is out of range
[   66.852799][ T6018] netlink: zone id is out of range
[   66.855369][ T6018] netlink: zone id is out of range
[   66.858592][ T6018] netlink: zone id is out of range
[   66.860982][ T6018] netlink: zone id is out of range
[   66.863251][ T6018] netlink: zone id is out of range
[   67.004639][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'.
[   67.147909][ T6043] netlink: 'syz.2.55': attribute type 39 has an invalid length.
[   67.295708][ T6050] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   67.362733][ T6053] tipc: Started in network mode
[   67.364496][ T6053] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711
[   67.369149][ T6053] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   67.383840][ T6054] gretap1: entered promiscuous mode
[   67.431988][ T6050] macvlan2: entered promiscuous mode
[   67.434356][ T6050] macvlan2: entered allmulticast mode
[   67.479323][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'.
[   67.495009][ T6059] Zero length message leads to an empty skb
[   67.498104][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.507148][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.510678][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.524327][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.988000][ T5848] Bluetooth: hci1: command tx timeout
[   67.990297][ T5848] Bluetooth: hci2: command tx timeout
[   68.134669][ T6084] netlink: 'syz.1.73': attribute type 11 has an invalid length.
[   68.453738][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.202447][ T6147] netlink: 'syz.1.99': attribute type 13 has an invalid length.
[   69.205784][ T6147] netlink: 'syz.1.99': attribute type 17 has an invalid length.
[   69.437018][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.463305][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.762057][ T6188] Bluetooth: MGMT ver 1.23
[   70.067514][ T5848] Bluetooth: hci1: command tx timeout
[   70.069897][   T54] Bluetooth: hci2: command tx timeout
[   70.197257][ T6217] syzkaller0: entered promiscuous mode
[   70.199140][ T6217] syzkaller0: entered allmulticast mode
[   70.230503][ T6219] net_ratelimit: 9 callbacks suppressed
[   70.230513][ T6219] netlink: zone id is out of range
[   70.235158][ T6219] netlink: zone id is out of range
[   70.238691][ T6219] netlink: zone id is out of range
[   70.241248][ T6219] netlink: zone id is out of range
[   70.243484][ T6219] netlink: zone id is out of range
[   70.245923][ T6219] netlink: zone id is out of range
[   70.248590][ T6219] netlink: zone id is out of range
[   70.251047][ T6219] netlink: zone id is out of range
[   70.253061][ T6219] netlink: zone id is out of range
[   70.255107][ T6219] netlink: zone id is out of range
[   71.061903][ T6231] __nla_validate_parse: 10 callbacks suppressed
[   71.061923][ T6231] netlink: 248 bytes leftover after parsing attributes in process `syz.1.138'.
[   71.193946][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.197421][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.208082][ T6234] netlink: 'syz.0.139': attribute type 10 has an invalid length.
[   71.233530][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.252022][ T6234] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   71.264891][ T6234] netlink: 'syz.0.139': attribute type 10 has an invalid length.
[   71.270046][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.139'.
[   71.277839][ T6234] batadv0: entered promiscuous mode
[   71.279767][ T6234] batadv0: entered allmulticast mode
[   71.289444][ T6234] bond0: (slave batadv0): Releasing backup interface
[   71.295529][ T6234] bridge0: port 3(batadv0) entered blocking state
[   71.305581][ T6234] bridge0: port 3(batadv0) entered disabled state
[   71.335303][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'.
[   71.347856][ T5880] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   71.351311][ T5880] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   71.375497][ T6240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.142'.
[   71.483573][ T6252] netlink: 96 bytes leftover after parsing attributes in process `syz.0.144'.
[   71.498462][ T6252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'.
Connection to localhost closed by remote host.
[   72.971435][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.061503][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.114478][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.168907][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.259844][   T13] bridge_slave_1: left allmulticast mode
[   73.262326][   T13] bridge_slave_1: left promiscuous mode
[   73.265350][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.272428][   T13] bridge_slave_0: left allmulticast mode
[   73.274851][   T13] bridge_slave_0: left promiscuous mode
[   73.279115][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.516016][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.522855][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.529205][   T13] bond0 (unregistering): Released all slaves
[   73.612067][   T13] tipc: Left network mode
[   73.798635][   T13] hsr_slave_0: left promiscuous mode
[   73.800744][   T13] hsr_slave_1: left promiscuous mode
[   73.803199][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.806234][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.810787][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.815175][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.830832][   T13] veth1_macvtap: left promiscuous mode
[   73.833348][   T13] veth0_macvtap: left promiscuous mode
[   73.837260][   T13] veth1_vlan: left promiscuous mode
[   73.839782][   T13] veth0_vlan: left promiscuous mode
[   74.164346][   T13] team0 (unregistering): Port device team_slave_1 removed
[   74.189407][   T13] team0 (unregistering): Port device team_slave_0 removed
[   74.715637][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.720275][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.763308][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.768953][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.826155][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.830655][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.882807][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.891617][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.031715][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.120275][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.194032][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.269467][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.401573][   T13] bridge_slave_1: left allmulticast mode
[   75.404017][   T13] bridge_slave_1: left promiscuous mode
[   75.407262][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.413440][   T13] bridge_slave_0: left allmulticast mode
[   75.415770][   T13] bridge_slave_0: left promiscuous mode
[   75.419166][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.428573][   T13] bridge0: port 3(batadv0) entered disabled state
[   75.433472][   T13] bridge_slave_1: left allmulticast mode
[   75.435792][   T13] bridge_slave_1: left promiscuous mode
[   75.440043][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.446085][   T13] bridge_slave_0: left allmulticast mode
[   75.450542][   T13] bridge_slave_0: left promiscuous mode
[   75.453056][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.722222][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.728061][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.732004][   T13] bond0 (unregistering): Released all slaves
[   75.888552][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.893519][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.897711][   T13] bond0 (unregistering): Released all slaves
[   75.960835][   T13] tipc: Left network mode
[   76.272310][   T13] hsr_slave_0: left promiscuous mode
[   76.282975][   T13] hsr_slave_1: left promiscuous mode
[   76.285793][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.289594][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.293302][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.298786][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.307814][   T13] hsr_slave_0: left promiscuous mode
[   76.310478][   T13] hsr_slave_1: left promiscuous mode
[   76.312683][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.315313][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.319998][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.322677][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.339497][   T13] veth1_macvtap: left promiscuous mode
[   76.341820][   T13] veth0_macvtap: left promiscuous mode
[   76.344081][   T13] veth1_vlan: left promiscuous mode
[   76.346157][   T13] veth0_vlan: left promiscuous mode
[   76.351618][   T13] veth1_macvtap: left promiscuous mode
[   76.354038][   T13] veth0_macvtap: left promiscuous mode
[   76.357153][   T13] veth1_vlan: left promiscuous mode
[   76.359739][   T13] veth0_vlan: left promiscuous mode
[   76.743848][   T13] team0 (unregistering): Port device team_slave_1 removed
[   76.774938][   T13] team0 (unregistering): Port device team_slave_0 removed
[   77.242732][   T13] team0 (unregistering): Port device team_slave_1 removed
[   77.270226][   T13] team0 (unregistering): Port device team_slave_0 removed
[   81.436799][  T793] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
10:13:01  Registers:
info registers vcpu 0

CPU#0
RAX=4d3a2adcbcddda00 RBX=ffffffff819683c8 RCX=4d3a2adcbcddda00 RDX=0000000000000001
RSI=ffffffff8d9b95c1 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005584c5e1dbf8 CR3=0000000023422000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000ca02f6f 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=00000000ff000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d10ef30ecf77bd00 RBX=ffffffff819683c8 RCX=d10ef30ecf77bd00 RDX=0000000000000001
RSI=ffffffff8d9b95c1 RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39330 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005584c5e2c3a0 CR3=000000010f494000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000021 000000002f6d616c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=772f74656e2f386d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
